Multiple vulnerabilities in Microsoft Browsers

説明

Multiple vulnerabilities were found in Microsoft Browsers. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, spoof user interface.

Below is a complete list of vulnerabilities:

1. An information disclosure vulnerability in Internet Explorer can be exploited remotely via specially crafted content to obtain sensitive information.
2. A remote code execution vulnerability in VBScript can be exploited remotely via specially crafted website to execute arbitrary code.
3. A memory corruption vulnerability in Scripting Engine can be exploited remotely to execute arbitrary code.
4. A memory corruption vulnerability in Microsoft Browser can be exploited remotely via specially crafted website to execute arbitrary code.
5. An information disclosure vulnerability in Microsoft Edge can be exploited remotely via specially crafted content to obtain sensitive information.
6. A spoofing vulnerability in Microsoft Edge (Chromium-based) in IE Mode can be exploited remotely via specially crafted website to spoof user interface.

オリジナルアドバイザリー

• CVE-2020-1315

• CVE-2020-1213
• CVE-2020-1215
• CVE-2020-1214
• CVE-2020-1073
• CVE-2020-1216
• CVE-2020-1219
• CVE-2020-1242
• CVE-2020-1220
• CVE-2020-1260
• CVE-2020-1230

エクスプロイテーション

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

関連製品

• Microsoft-Internet-Explorer
• Microsoft-Edge
• ChakraCore

CVEリスト

• CVE-2020-1260
  critical
• CVE-2020-1214
  critical
• CVE-2020-1230
  critical
• CVE-2020-1315
  warning
• CVE-2020-1213
  critical
• CVE-2020-1215
  critical
• CVE-2020-1216
  critical
• CVE-2020-1073
  critical
• CVE-2020-1219
  critical
• CVE-2020-1242
  warning
• CVE-2020-1220
  high

KBリスト

• 4561603
• 4561643
• 4561649
• 4560960
• 4557957
• 4561666
• 4561602
• 4561612
• 4561616
• 4561608
• 4561621

も参照してください

お住まいの地域に広がる脆弱性の統計をご覧ください statistics.securelist.com